Vulnetix
Try Vulnetix Request Demo
CVE-2016-6288 PUBLISHED

The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.

EPSS 4.32% · 88.8th percentile

Risk Scores

EPSS Score
4.32%
88.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTShhvm0, 3.11.0+dfsg-1, 3.11.1+dfsg-1
Ubuntu:14.04:LTSphp55.5.6+dfsg-1ubuntu2, 5.5.8+dfsg-2ubuntu1, 5.5.9+dfsg-1ubuntu1

Timeline

References

Open in Interactive Console →